Searching PAJ 



Page 1 of 2 



PATENT ABSTRACTS OF JAPAN 

(1 1 publication number : 2000-1 56685 

(43)Date of publication of application : 06.06.2000 



(51)Int.CI. 



H04L 12/28 
B60R 16/02 
// B60K 6/00 
B60K 8/00 



(21 Application number : 10-328638 
(22)Date of filing: 18.11.1998 



(71) Applicant 

(72) Inventor : 



FUJI HEAVY IND LTD 
NITTA TOMOAKI 



(54) MONITORING DEVICE FOR ABNORMALITY OF VEHICLE CONTROL SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To accurately detect the 
abnormality of a specific control unit by means of another 
control unit and with no addition of specific hardware, etc., by 
judging the abnormality of the specific control unit when the 
count value included in the communication data sent from the 
specific control unit are not continuously updated. 
SOLUTION: A means is added to a control unit other than the 
specific one included in a vehicle control system to monitor the 
count value included in the communication data sent from the 
specific control unit and to decide the abnormality of the 
specific control unit when the count value is not continuously 
updated. In this system, A T/M ECU 24 always monitors a 
transmitting frequency counter contained in a data frame which 
is sent from an HEV ECU 20 to a motor A controller 21 and a 
motor B controller 22. Then the ECU 24 decides the 
abnormality of the ECU 20 and notifies other ECUs of this 
abnormality when the value of the transmitting frequency 
counter is not normally increased (or decreased) twice. 
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* NOTICES * 

JPO and NCI PI are not responsible for any 
damages caused by the use of this translation. 



1 .This document has been translated by computer. So the translation may not reflect the original precisely. 

2 **** s hows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] It is emergency supervisory equipment of the car control system which comes to connect two or 
more control units with which controlled systems differ mutually through multiplex communication Rhine. 
It has a means to insert the counter value of the count of transmission without regards to control data into 
commo data, and to transmit to the specific control unit in the above-mentioned car control system. When 
the above-mentioned counter value in the commo data transmitted to other control units in the above- 
mentioned car control system from the above-mentioned specific control unit is supervised and the above- 
mentioned counter value is not updated continuously, Emergency supervisory equipment of the car control 
system characterized by equipping the above-mentioned specific control unit with a means to judge that it is 
unusual. 

[Claim 2] It is emergency supervisory equipment of the car control system which comes to connect two or 
more control units with which controlled systems differ mutually through multiplex communication Rhine. 
The 1 st control unit in the above-mentioned car control system is equipped with a means to insert the 
counter value of the count of transmission without regards to control data into commo data, and to transmit 
to the 2nd control unit in the above-mentioned car control system. When the above-mentioned counter value 
in the commo data transmitted to the 2nd control unit of the above from the 1st control unit of the above is 
supervised to the 3rd control unit in the above-mentioned car control system and the above-mentioned 
counter value is not continuously updated, Emergency supervisory equipment of the car control system 
characterized by equipping the 1st control unit of the above with a means to judge that it is unusual. 



[Translation done.] 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the emergency supervisory equipment of the car control 
system which comes to connect two or more control units with which controlled systems differ mutually 
through multiplex communication Rhine. 
[0002] 

[Description of the Prior Art] There is much what carries two or more electronic control units (ECU) which 
consist of a microcomputer etc., and shares various control of an engine, transmission, a suspension, an air- 
conditioner, etc. with each ECU, and it combines ECU of these plurality by communication link Rhine, and 
he is trying to aim at improvement in a total controllability by exchanging control data in cars, such as an 
automobile. 

[0003] By such system, in addition to the self-test to the circumference system of each ECU itself, it is 
important to perform an abnormality monitor as the whole system, and the health check of ECUs by the 
watchdog timer and the health check by echo back of commo data are performed by the former. 
[0004] 

[Problem(s) to be Solved by the Invention] However, in order to cope with hypertrophy of the wire harness 
accompanying increase of the amount of data transmission between two or more ECUs, constraint of a 
layout, and the problem of the increase of weight, being in the inclination which multiplexes the 
communication link between each ECU, and adding the hardware for abnormality monitors, such as a 
watchdog timer line, not only moves against such a cure, but it causes the rise of system cost in recent years. 

[0005] Moreover, under the abnormality monitor by echo back of data etc., the processing time is required 
upwards, the traffic of a transmission line increases, and there is a problem that a system-wide throughput 
falls. 

[0006] This invention aims at offering the emergency supervisory equipment of a car control system which 
can detect the abnormalities of a specific control unit correctly with other control units, without having been 
made in view of the above-mentioned situation, and adding the special hardware for an abnormality 
monitor, and complicated processing. 
[0007] 

[Means for Solving the Problem] In order to attain the above-mentioned purpose, invention according to 
claim 1 It is emergency supervisory equipment of the car control system which comes to connect two or 
more control units with which controlled systems differ mutually through multiplex communication Rhine. 
It has a means to insert the counter value of the count of transmission without regards to control data into 
commo data, and to transmit to the specific control unit in the above-mentioned car control system. When 
the above-mentioned counter value in the commo data transmitted to other control units in the above- 
mentioned car control system from the above-mentioned specific control unit is supervised and the above- 
mentioned counter value is not updated continuously, it is characterized by equipping the above-mentioned 
specific control unit with a means to judge that it is unusual. 

[0008] Invention according to claim 2 is emergency supervisory equipment of the car control system which 
comes to connect two or more control units with which controlled systems differ mutually through multiplex 
communication Rhine. The 1st control unit in the above-mentioned car control system is equipped with a 
means to insert the counter value of the count of transmission without regards to control data into commo 
data, and to transmit to the 2nd control unit in the above-mentioned car control system. When the above- 
mentioned counter value in the commo data transmitted to the 2nd control unit of the above from the 1st 
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control unit of the above is supervised to the 3rd control unit in the above-mentioned car control system and 
the above-mentioned counter value is not continuously updated, It is characterized by equipping the 1 st 
control unit of the above with a means to judge that it is unusual. 

[0009] That is, in invention according to claim 1, in case data are transmitted from the specific control unit 
in a car control system, the counter value of the count of transmission without regards to control data is 
inserted, it transmits, and this counter value is supervised with other control units. And when this counter 
value is not updated continuously, it is judged that a specific control unit is unusual. 
[0010] In invention according to claim 2, in case data are transmitted to the 2nd control unit from the 1st 
control unit, the counter value of the count of transmission without regards to control data is inserted, it 
transmits, and this counter value is supervised with the 3rd control unit. And in the 3rd control unit, when 
this counter value is not updated continuously, it is judged that the 1 st control unit is unusual. 
[0011] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention is explained with 
reference to a drawing. The explanatory view in which, as for drawing 1 , drawing 1 and drawing 2 show a 
format of a data frame with respect to one gestalt of operation of this invention, and drawing 2 are the block 
diagrams of the control system of the hybrid car combined by the multiplex communication system. 
[0012] Drawing 2 shows the control system of the hybrid car which uses an engine and a motor together as 
an example of the car control system which comes to connect two or more control units with which 
controlled systems differ mutually through multiplex communication Rhine, and seven electronic control 
units (ECU) are combined by the multiplex communication system, and it constitutes the hybrid control 
system. 

[0013] The motor A which bears starting of an engine 1 and an engine 1, and a generation of electrical 
energy and power assistance with this gestalt as a hybrid car The planetary-gear unit 3 connected with 
output-shaft la of an engine 1 through Motor A, The function of this planetary-gear unit 3 was controlled, 
and while becoming a source of driving force at the time of start and go-astern, it has the drive system which 
considers the power translator 4 which performs Motor B, gear change, and torque amplification which bear 
recovery of moderation energy, and bears the power conversion function at the time of transit as a basic 
configuration. 

[0014] Moreover, the lock-up clutch 2 which the planetary-gear units 3 are the planetary gear of the single 
pinion type which has carrier 3b supported for the pinion which gears to sun gear 3 a and this sun gear 3 a, 
enabling free rotation, and ring wheel 3 c which gears with a pinion, and concludes and releases sun gear 3 a 
and carrier 3b is put side by side. 

[0015] Furthermore, although it is possible to use the change gear which combined the gear train, the change 
gear using a hydraulic torque converter, etc. as a power translator 4, it is desirable to adopt the belt type 
nonstep variable speed gear (CVT) which comes to loop around driving-belt 4e between primary pulley 4b 
supported to revolve by input-shaft 4a and secondary pulley 4d supported to revolve by output-shaft 4c, and 
it explains the power translator 4 as CVT4 hereafter. 

[0016] namely, in the drive system of the hybrid car of this gestalt The planetary-gear unit 3 which infixed 
the lock-up clutch 2 between sun gear 3a and carrier 3b is arranged between output-shaft la of an engine 1, 
and input-shaft 4a of CVT4. While sun gear 3a of the planetary-gear unit 3 is combined with output-shaft la 
of an engine 1 through one motor A, carrier 3b is combined with input-shaft 4a of CVT4, and the motor B of 
another side is connected with ring wheel 3 c. And it has the composition that the differential devices 6 were 
formed successively by output-shaft 4c of CVT4 through the speed reducing gear train 5, and a front wheel 
or the driving wheels 8 of a rear wheel were formed successively by this differential device 6 through the 
driving shaft 7. 

[0017] In this case, as mentioned above, while combining an engine 1 and Motor A to sun gear 3 a of the 
planetary-gear unit 3, combine Motor B with ring wheel 3c, and an output is obtained from carrier 3b. 
Furthermore, by CVT4, gear change and since it carries out torque amplification and he is trying to transmit 
to a driving wheel 8, two motors A and B can use the output from carrier 3b for both a generation of 
electrical energy and driving force supply, and the motor of the Koide force can be used comparatively. 
[001 8] Moreover, by combining sun gear 3a and carrier 3b of the planetary-gear unit 3 with the lock-up 
clutch 2 according to transit conditions, the driving shaft of engine direct connection from an engine 1 to 
CVT4 with which two motors A and B have been arranged in between can be formed, and driving force can 
be efficiently transmitted to CVT4, or the damping force from a driving wheel 8 side can be used. 
[0019] In addition, the torque transmission of the engine 1 through the planetary-gear unit 3 at the time of 
association and release of the lock-up clutch 2 and Motors A and B and the electrical and electric equipment 
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by generation of electrical energy flowing are explained in full detail by Japanese Patent Application No. 
No. 4080 '[ ten to ] which these people submitted previously. 

[0020] The hybrid control system which controls the above hybrid car It centers on the hybrid (HEV_ECU) 
ECU 20 which generalizes the whole system. Motor A The motor A controller 21 and Motor B which carry 
out drive control The motor B controller 22 and engine 1 which carry out drive control The engine ECU 
which carries out drive control The dc-battery management unit (BAT_MU) 25 which performs control of 
electric power of the transmission (T/M_ECU) ECU 24 which performs control of 23, the lock-up clutch 2, 
and CVT4, and a dc-battery 10 (E/GJECU) By 1st multiplex communication Rhine 30 It is combined with 
HEV_ECU20 and the brake (BRK_ECU) ECU 26 which performs brake control is combined with 
HEV ECU20 by 2nd multiplex communication Rhine 31 of dedication. 

[0021] HEV_ECU20 is what controls the whole hybrid control system, the sensor switches which detect the 
operation situation of a driver — for example It turns on, when the actuated valve position of the accelerator 
pedal sensor (APS) 1 1 which detects the amount of treading in of the accelerator pedal which is not 
illustrated, the brake switch 1 2 switch on by treading in of the brake pedal which is not illustrated, and the 
selection device section 13 of a change gear is P range or N range. The inhibitor switch 14 grade turned off 
when set to transit range, such as D range and R range, is connected. 

[0022] And in HEVECU20, required car driving torque is calculated based on the data transmitted from the 
signal and each ECU from each sensor switches, it opts for torque allocation of a drive system, and a control 
command is transmitted to each ECU by multiplex communication. 

[0023] In addition, the drop 27 which consists of various meter which display the operational status of cars, 
such as the vehicle speed, an engine speed, and a dc-battery charge condition, a warning lamp for warning 
an operator at the time of an abnormal occurrence, etc. is connected to HEV_ECU20. When this drop 27 is 
connected also to T/M_ECU24 and abnormalities occur in HEV_ECU20, instead of HEV_ECU20, 
T/M_ECU24 controls at the time of abnormalities, and performs an abnormality display to a drop 27. 
[0024] On the other hand, the motor A controller 21 is equipped with the inverter for driving Motor A, and 
performs constant revolving speed control of Motor A fundamentally by the servo ON/OFF command and 
rotational frequency command which are transmitted by multiplex communication from HEV_ECU20. 
Moreover, from the motor A controller 2 1 , to HEV_ECU20, the torque of Motor A, an engine speed, a 
current value, etc. are fed back, it transmits, and data, such as a torque limitation demand and an electrical- 
potential-difference value, are transmitted further. 

[0025] The motor B controller 22 is equipped with the inverter for driving Motor B, and performs the 
constant torque control of Motor B fundamentally by the servo ON/OFF (normal rotation and inversion are 
included) command and torque command (power running, regeneration) which are transmitted by multiplex 
communication from HEV_ECU20. Moreover, from the motor B controller 22, to HEV_ECU20, the torque 
of Motor B, an engine speed, a current value, etc. are fed back, it transmits, and data, such as an electrical- 
potential-difference value, are transmitted further. 

[0026] E/GJECU23 is what performs the torque control of an engine 1 fundamentally. The torque command 
of the positive/negative transmitted by multiplex communication from HEV ECU20, control commands, 
such as a fuel cut command and an air-conditioner ON/OFF authorization command, — and Real torque 
feedback data, the vehicle speed, the gear change selection location by the inhibitor switch 14 (P, N range, 
etc.), Accelerator full open data and accelerator close-by-pass-bulb-completely data based on a signal of 
APS1 1, Based on ON of the brake switch 12, an OFF condition, the brake operating state containing ABS, 
etc., power amendment study of auxiliary machinery, such as fuel oil consumption from the injector which 
is not illustrated, throttle opening by ETC (electric throttle valve), and A/C (air-conditioner), a fuel cut, etc. 
are controlled. 

[0027] Moreover, in E/G ECU23, while feeding back the throttle-valve close-by-pass-bulb-completely data 
based on the controlling torque value of an engine 1 , implementation of a fuel cut, the implementation of 
full open increase-in-quantity amendment to fuel oil consumption, ON of an air-conditioner, an OFF 
condition, and the idle switch that is not illustrated etc. to HEV_ECU20 and transmitting to HEV_ECU20, 
the warming-up demand of an engine 1 etc. is transmitted. 

[0028] The target primary pulley rotational frequency of CVT4 to which T/M_ECU24 is transmitted by 
multiplex communication from HEV ECU20, Control commands, such as CVT input-torque directions and 
a lock-up demand, and an E/G rotational frequency, ON of accelerator opening, the gear change selection 
location by the inhibitor switch 14, and the brake switch 12, an OFF condition, Based on the information on 
the throttle- valve close-by-pass-bulb-completely data of the engine 1 by the brake operating state and idle 
switch containing air-conditioner change authorization and ABS etc., while controlling conclusion and 
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release of the lock-up clutch 2, the change gear ratio of CVT4 is controlled. 
[0029] Mbreover, from T/M JECU24, while feeding back data, such as a gear change condition 
corresponding to the vehicle speed, input limit torque, the primary pulley engine speed of CVT4 and a 
secondary pulley engine speed, lock-up completion, and the inhibitor switch 14, and transmitting to 
HEV_ECU20, the E/G engine-speed rise demand for making the oil quantity of CVT4 raise, a low- 
temperature starting demand, etc. are transmitted. 

[0030] BAT_MU25 is the so-called control-of-electric-power unit, performs various control, i.e., charge- 
and-discharge control of a dc-battery 1 0, when managing a dc-battery 1 0, fan control, external charge 
control, etc., and transmits data, such as remaining capacity of a dc-battery 10, an electrical potential 
difference, and a current-limiting value, and the data in which under external charge is shown to 
HEV_ECU20 by multiplex communication. Moreover, in performing external charge, a contactor 9 is 
switched and it separates a dc-battery 10, the motor A controller 2 1 , and the motor B controller 22. 
[0031] Based on information transmitted by multiplex communication from HEV_ECU20, such as an 
amount which can be revived, and regeneration torque feedback, BRK_ECU26 calculates required damping 
force, controls the oil pressure of a break system, to HEVECU20, feeds back the brake operating state 
containing the amount command of regeneration (torque command), the vehicle speed, oil pressure, and 
ABS etc., and transmits. 

[0032] In the above hybrid control system, are trying to supervise abnormalities through a multiplex 
communication system, when it cannot run, insurance is made to suspend a car at the time of the abnormal 
occurrence of a drive system or a control system, and when it can run, load limitation of a drive system is 
performed and necessary minimum performance traverse is secured. 

[0033] The abnormality monitor through a multiplex communication system is performed mainly by 
managing intensively the diagnostic result by the self-checking function of each ECU by HEV_ECU20 
which generalizes a system. In addition to a diagnosis of the ECU by the watchdog timer itself, as a self- 
checking function of each ECU, there are an open circuit of an actuator system, a diagnosis of short circuit 
generating, etc. by the check, and the applied voltage and the output current value to an actuator of a 
diagnosis of the open circuit and short circuit generating by the monitor of the output value of a sensor itself 
and the adjustment of control data and a sensor output value. 

[0034] For example, it is possible to detect the abnormalities of Motors A and B or a sensor system from the 
detection value of the drive current of Motors A and B etc. in the self- test of the motor A controller 21 and 
the motor B controller 22 in addition to the malfunction detection of the motor A control system by the 
watchdog timer with which each was equipped, and the motor B control system itself. 
[0035] Moreover, it is possible to detect the abnormalities of a sensor system or an actuator system in the 
self- test of E/G ECU23 with adjustment with the real throttle opening which was detected by the control 
value of an electric throttle valve and the sensor in addition to the malfunction detection of the engine 
control system by the self watchdog timer itself, the adjustment of the engine control value based on the 
accelerator opening data of APS1 1 received from HEVECU20, and a real throttle opening and a real 
engine speed, etc. 

[0036] Moreover, it is possible to detect the abnormalities of a sensor which detect abnormalities and 
rotational frequencies, such as a change-gear-ratio control valve, from the adjustment of the real change gear 
ratio which is computed in the self- test of T/M_ECU24 based on the output value of the sensor which 
detects the rotational frequency of primary pulley 4b, and the output value of the sensor which detects a 
secondary pulley 4d rotational frequency in addition to the malfunction detection of the gear change control 
system by the self watchdog timer itself, and the change-gear-ratio control value of CVT4 etc. 
[0037] Moreover, it is possible to detect the abnormalities of a dc-battery 10 and the abnormalities of a 
contactor 9 based on the output value from the sensor which detects the output current from the output value 
and dc-battery 10 of a sensor which detects the electrical potential difference of a dc-battery 10 in the self- 
test of BAT MU25 in addition to the malfunction detection of the dc-battery managerial system by the self 
watchdog timer itself etc. 

[0038] Furthermore, it is possible to detect the abnormalities of a hydraulic control valve and other brake 
actuators based on the output value of the sensor which detects the output value and wheel speed of the 
sensor which detects the oil pressure of a break system in the self-test of BRK_ECU26 in addition to the 
malfunction detection of the brake control system by the self watchdog timer itself etc. 
[0039] When abnormalities are detected by the self- test in each ECU and multiplex communication receives 
abnormality notification in HEV_ECU20, or when the periodical communication link from predetermined 
ECU is not performed, or when the control command transmitted to each ECU by multiplex communication 
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and the control data fed back from each ECU do not have consistency While notifying an abnormal 
occurrence to other ECUs and restricting actuation of each ECU noting that the ECU is unusual, an 
abnormal occurrence is displayed on a drop 27 and an operator is told about failure generating. 
[0040] It is desirable to adopt the communication network which can respond to a high-speed 
communication link as a multiplex communication system which combines each ECU, and it has adopted 
CAN (Controller Area Network) which is one of the standard protocols of ISO as a communication network 
of a car with this gestalt. 

[0041] The message of CAN as everyone knows The data frame of transmit data, They are four kinds of the 
remote frame of a Request to Send, the error frame at the time of error detection, and the overload frame that 
a receiving side outputs at the time of reception preparation unfinished. With this gestalt A self-test result is 
required of each ECU from HEV_ECU20 using a remote frame at the time of system starting and a 
periodical system diagnosis. While communicating control data, such as a control command from 
HEV_ECU20 to each ECU, and feedback data from each ECU to HEV_ECU20, for every fixed time 
amount using a data frame When the self-test and HEV ECU20 in each ECU detect abnormalities, 
abnormality notification of a random period is performed using a data frame. 

[0042] Drawing 1 shows a format of a data frame, while determining the priority of a message as the 
Arbitration frame following the star TOOBU frame of communication link initiation, the identifier for 
identifying the destination and the contents of the message is stored, and the data for notifying a control 
command, control data or abnormalities, and warning to the data field following the control field further for 
control are stored. After a data field, the en doping frame which shows the CRC field for transmitting error 
checking and the end of a message continues, and between an en doping frame and star TOOBU frames 
serves as INTAFUREMUSUPESU which shows between a message and messages. 

[0043] In addition, in the communication link by the 2nd multiplex communication Rhine of the dedication 
which combines HEV_ECU20 and BRKECU26, an identifier is omitted and simplification and 
improvement in the speed of processing are attained. 

[0044] A data field is n bytes of variable-length field (it is a remote frame at n=0-8:n=0), and in the 
communication link about the control data between HEV ECU20 and each ECU In the data field of n=l-8 
every [ 1 byte or ] 2 bytes An electrical potential difference, Each control item, such as an engine speed and 
throttle opening, is assigned, and ON of a switch, the OFF condition, the gear change range location, Servo 
ON, the OFF command, etc. are assigned for each [ it is 1 byte ] bit of every. 

[0045] Moreover, the data for notifying abnormalities and warning are stored in 1 byte of data field, 1 byte 
of bits 0-6 are assigned to the error number which shows the contents of an error, and a bit 7 is assigned to 
the error flag which shows error generating. An error flag is set to 1 at the time of an abnormal occurrence, 
and is set to "0" at the time of always [ forward ] or warning. Moreover, an error number is "000000" always 
[ forward ]. 

[0046] In this case, the data frame transmitted for every fixed time amount for system control from 
HEV_ECU20 can detect the abnormalities of HEV ECU20 now by other ECUs by inserting the counter of 
the count of transmission without regards to control data in the free area of day TAFIRUDO for 8 bytes, and 
supervising the value of this count counter of transmission by other ECUs other than HEV_ECU20. 
[0047] In this gestalt, 5 bytes of control data and 1 byte of count counter of transmission following this 
control data constitute the data field of a data frame (an identifier is common) which transmits to the motor 
A controller 21 and the motor B controller 22 from HEV_ECU20. 

[0048] namely, in the data frame transmitted to the motor A controller 21 and the motor B controller 22 
from HEV_ECU20 It has 6 bytes of data field of DATA 1 -D ATA6 so that it may illustrate to drawin g 1 . 1 
byte of high order of a motor A engine-speed command and DATA2 1 byte of low order of this motor A 
engine-speed command, [ DATA1 ] 1 byte of high order of a motor B torque command and DATA4 1 byte 
of low order of this motor B torque command, [ DATA3 ] DATA5 serves as a motor A servo-on command 
which is 1 bit each, motor A torque 0 command, and a motor B servo-on command, and last DATA6 serves 
as a count counter of transmission. 

[0049] In HEV_ECU20, for every transmission to the motor A controller 21 and the motor B controller 22, 
the increment (or decrement) of the count counter of transmission in a data field is carried out from initial 
value (for example, 0), and this count counter of transmission can be supervised by the motor A controller 
21 of a receiving side or the motor B controller 22, and ECU of further others. 

[0050] When abnormalities occur in HEV_ECU20, in order that T/MECU24 may perform processing at 
the time of abnormalities instead of HEVJECU20 in the hybrid control system of this gestalt, He is trying 
for T/M_ECU24 to monitor continuously the count counter of transmission in the data frame transmitted to 
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the motor A controller 21 and the motor B controller 22 from HEV_ECU20. In T/M_ECU24, when the 
increment (or decrement) of the value of the count counter of transmission is not continuously carried out 
twice to normal, HE VJECU20 judges that it is unusual and HEVJECU20 performs abnormality notification 
of an unusual purport to other ECUs. 

[0051] That is, under the self-test of HEV_ECU20 self, or the monitor of a watchdog timer, it is possible to 
detect the abnormalities which are not detected by other ECUs, and since the count counter of transmission 
is inserted in the data frame moreover periodically transmitted from HEV_ECU20, abnormalities can be 
correctly detected by easy processing, without increasing the traffic of a transmission line. 
[0052] Moreover, it becomes possible to realize the health check of a cheap configuration, without adding 
the special hardware for an abnormality monitor like extension of a watchdog timer line by inserting the 
count counter of transmission in the data frame transmitted from each ECU. 
[0053] 

[Effect of the Invention] As explained above, when data are transmitted from the control unit in a car control 
system according to this invention, When insert the counter value of the count of transmission without 
regards to control data, it transmits, this counter value is supervised with other control units and a counter 
value is not updated continuously, in order to judge that the control unit which transmitted data is unusual, 
The effectiveness which was [ be / the abnormalities of a specific control unit / with other control units / 
correctly detectable ] excellent is acquired without adding the special hardware for an abnormality monitor, 
and complicated processing. 

[Translation done.] 
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1 

/lW.tt«*«o«|ffl] 
/ 7 h * ^ffijffiffl y4>*ft LT«R LT^i 9ffiflUflP v 

x- * tliW*>f)«tt»jafl||3fto* -V > *ffi£iflMgx*- 

* rt t: w a l r mm -t * -T-S «■ « * % 

JLEfl£WW» > x f - u ft wfftowai jl- ^ he, JLE4* 
SZOWKU.- 7 h iafflt $ JLfciflKBx'- * rto_blEA 

x f a co »nrE««B "C ^ot, 

±E*WH8Pv xx ArtcoSft 1 he, flmfm 

^flUWALt ±E¥PiMtt v x -f a to $ 2 fiOi|fij».=L 

siL&a«T f -^rto±E* , > >^fia^Bi«L, ±.Ba* 
k fc 1- * mm»m -> x x ^osts^tc 

[ 0 0 0 l ] 

Ml L T £ $HMfll *> x x ^ co »*fi«3*« tc B8 + £ o 
[ 0 0 0 2 ] 

>krjL-^*35»c,&*tt»0«^IWWi--> h (EC 
U) H&f Lti>>>, ^>xs-;v3>, f;^ 
> v 3 > % jlj n >-$oa^ fci&ljffllfcft E C U "C^tBi- 
£ t o/jf^ < , E C u fciOMI 7^>t:io 

Ttt* L , flflffl x- * go* *j IK 'J fcfif & w > -C h - ? 
/Kj«IBlttW|nl±Sriai J: ~; i:Lt^;j : 

[ 0 0 0 3 ] ZcD £ -) C:vXf ^ "C fi , *ECUa*-e 
<0Hifl*n»i-iae»Br(iliiii, ->xfA»!: LT 
»*E««:t?'}^t//lIiKr-*^, tfi*T-ii, **7x 

K ^HTCHEC U 1*1 ±««JIlR«* , jffifi x - 

/: c 
[ 0 0 0 4 ] 

[WBd'JSifcL J: *; fci"*IRBI] L^Lfctf^ 2b¥, 

- * x *>awdt* HT-JF jsaifflwp«iai(z» 



(2) 4$M2 0 0 0 -15 6 6 8 5 

2 

0 % 'V * 7x K 7 <-r|Si^w»W.6iliw/j^fiC)-'^- 

[0 0 0 5 ] 7-^xj-/( 7 ^cuM 
K«-CJi, «Lail#l««:K+-6±t:f£i3SI»o h v "7 < y ^ 

[ooo6] *«9«i±HBffffin«ATJfc ? nfc t o 

MM 7 h "C JEffllUi^m-f i 3 i: cor- & Z> WMPm > 
x x ^ «»ffirfi«l«E«:«tti-4 CfcfcBWfcLTv* 

[ 0 0 0 7 ] 

[ Klfi «r JWft-f 4 ^ ^ o¥-a] J-.EB W 1 31^1- ^ ^ 

^ VAnn v x x ^ r , ±Ba*H 

{l/iJi^ v x x a r^J o?$SeO HVP a - «y h u % Hfl* x*- ^ h 

20 i± Ki't) * & ^ »fi m & «o * <7 > ^ ffi t mm r-* « ^ » 

ALT jSffi-*- 4 , ±I£¥(ffu Miff v X x A |*3 (O 

1ftO«|«UL.=. ? ht*, -LEW5cOW«I^l- 7 hj&*<biS« 
?iL&a«T'-^rto±E* ^>^«*t«L, ±E* 
•> > ^ «* r »tt W t- E* r 5 n «r v » fc § ? ±Efl*ffi ^ JTjIJ^) 

[ 0 0 0 8] B*JH2E«o«W(i, H.^zmmtOLtf 

^ fflftoaww jl ^ 7 h s: zmmt ? < > % ft l t« 

flg L T & 4 IpfifijiljlJfiHJ •> x x A OW#E«SE«T-* o T , 
30 iiEVNMffli v^fArtoSl cod/fj^jL- 7 h u , HM 

x'- ^ ttir^^^j «rv»jaffi@ia:o* ■> > ^t^ntf- 

* rt Ulfli ALT ±EiPHW» > x x a 2 wHUWjl 

- 7 Kiisw+i^atflii, jtEflir«««ivxx^rt 

Oj£ 3 COWWJL- -y H:, ±fj£3£ l fiOWHlJi.- 7 h iyh 
-hER 2 coililJffllJL- 7 h CSft & iQlfix'- ^ l*J^± 
E * ^ > 9 m % ^ffil L , ± E * H / > ^ tt//]CSKtfJ u sE^r 

[o 0 0 9 ] -f&^t, »*iR l E««o»*-c«i, ^iHij 
40 IHftl ■> x x A ft«!|*52«DM«Ai 7 h 3&»*b x-- 9 % mt 
t-6R, iDUMx-- * t l±BI*>*bfrv^iafSHJSo* 'V > ^ 
f l S: » A L T mm L , ZcoiJ^>9 1- ftfecoM ffll J- - 7 

K-tatie tit, w<o*^>^«3&«aiaftusi«r 

[ooio] B*JH2E«o«W-C(±, JSicotwaiJLi 
7 h frh&2 7 hHx # -5'S:a«-i-J&|B, fN 

iM)x-^ >(iBB*>0«:v»j8«E|fto* ^/ > Mii^f AL 
TiS«U •I^>^'V>^«^r®3 coil;ljtfl)^- 7 h T^tii 



(3) 

3 

[0 0 l I ] 

[»WwS*OJB!RJ KIT, fflllflt'WHLr^S&iWwjl 
MO»ffifcRW+*o H l ROTS 2 I4*«Wo1SJ1W- 
JBJKcift^ H l lif- * 7 u- * -v 7 

v x x a cofffin^m -c * & o 

tO 0 3 2] .1212(4, 5vm«l«lWaL* f »'fc&ltt»WlBI 

«fll->7f A^>— L T , t SrWffl 

-*-*>W7y * K50«I8P->X7-2*S:S*U 7 owfE-T 
Wfl|j.r.yh (ECU) tf*£tta«*-ett'frSiiT-'W 

y>lh, x>v>J WiBIKlXWMt • Ml* T > x h * 
IE -j * A i: , i> V > I (DtitfM l a l-^e- * A & 
^LTjasttSiLi^^*^ y 4^.3.- * h 3 fc, -07 

? * * y ^-v^- -V h 3 (ommzmw u s&m * 

[0 0 l 4 ] * fc, 7v * 7 'J ^-Tjl-^ h 3 (4, 
^3a, wC0+>>^3 a izm&-t Z> SHE 
attUSW+^^r-r V T3 b, lf-*>.fc*^i-&y > 
^^r-V 3 c v > ^/w >*«o7^ * ? y ^ 

■VT'$)^ t>^rt3ah*t'i73bh • »Hc 

[0 0 15] 561:, INftKftattH t LTI4, IWJ 30 
fca**sb*fcffiffl|^»# h * =i * fcfflv,*fc 

S 3 *i* 7? 4 y 7- y 4 b J: ffi/J-Hi 4 c UHlS £ 
*-t* >^'J 7— 'J 4 d koratiSEffii^u h 4 e 

Lt&4^/H'*is«a« (cvt) k&m-t&zt 

**8 i L < , BIT, l^JgMfl 4tCVTULTB 

■HI"** 

[0 () l 6] «&^W7''J -y KflicolEM 

•y 7* 77f ^ i-^L/:/7 * * »J jl- y h 3 rt J 40 
x > >' > 1 cofli 1 a £ C V T 4 GO A?J«ii 4 a > 

-V 3 a jFJ. > v > 1 ©tll^Hl 1 a K — Atft 

LT$^?<Lii:i:ti:^t'J7 3 b**CVT4 

Hi 4 ai:»*SU, U >^***V3 c * Brt f 

Ig^Lt^io fit, CVT4 Wj'i4 c (Z«5S 

[ooi7] coJfl*, ffiridiL/j 4 -)t:x>>'> i ao* no 
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A* 7?** U ^ 7 h 3cO^>4 rJ T3 a^ 
JS^1-4fc t M:'J 3 c u^e-^ BtM^LT 

+ r y 7 3 b^f>ffl»<:»^ -t CL, ?*bti, *-v«; 
73 b *»^<oai*tC VT 4 CJ:^TtM^hJ^« 

[0018] i jfeffftftUlE CT n y * 7 v 7* 9 
y f 2 ?) 7v ^> ^ »J y h 3 >^"V3 a 

t*t'J73b ttft^tiltt, WlH2oo*-^ 
A, Bj& r KIE3:lirt:. i>v>lHCVT4i:i4i 
> > > ittttoEKlWi Sr »flt+ -6 - i: * T- C S , asp «£ < C 

jjfefijffl-r&c*:y/"es&o 

[00 1 9 ] inj . av97v-79?v*2 OiRfft ■ JW& 
li^)7*7^ y^f-VjL-iy h 3 «r^L/:i>->*> 1 

v>r i±, *UiWA* f ft«HlHl Lfj^fi^ 1 0 - 4 0 8 0 

[0 0 2 0] WL±C0^W7y -y K (£ ililjffll t^W7 'J 
y K iMftl vXf A{4, yXf^ifttttfit*^^'! 
vKECU (HEV_ECU) 2 0 t k L , ^ 

te»W»i" 4*-^ B3 > h d-v 2 2 , i>v> 1 
s frffi«»lllJ»+iJ.>i/>ECU CE/G_ECU) 2 
3 , P^777*^77f2 at^C V T 4 0«»*fif-) 
h7/Xvr>3>ECU (T/M_ECU) 2 4, /< 
7T'J 1 OOSJSaitff t y -r*- > > h^- 

-7h ( B A T M U ) 2 5**» 1 (O&SLMIf ? < > 3 

OCi'jTHIi V ECU 2 0 UlSfr 7 U - *iW 

ffllfrtf *;7U-*ECU (B R K ECU) 2 ft^WlJ 

tf)»2^M«9<>3 1 (UoTHE V ECU 2 

[0 0 2 1 ] H E V_ECU 2 0(4, ' W 7 y y Kftijftl 
->Xf-i.&ftOWai*rfT*; fco-C*^, K7 -f/<oa!*c 

L4'^7^-tJ^^^« Hf A. ji S: «tdi 1" -6 7 * -t ^ 

^^■t>^ (APS) ik HSLi^ru-^^y 

^fiOSPS*ii*«-i oTONt&r U-^rX <7f 1 2 , 
EiS«0-t U ^ H ««« 1 3 crmmtLmJj* P U > v XI4 
N^vW^CONl, L) U > v , R U > 
l/>y'i:-t7 h SiLTv^ t £ CO P F1"& < > K t" ^ 

x^7f i 4 -S/«?ntv>; J:; 

[0 0 2 2 ] fLT, ll E V ECU 2 0 T"I4, &-fe > 

■ X -f ^^n^OOii-55-^^rEC U^^^l?U/:f 

co h^^K»«ri&3cL, ^ffijfliffiUJioTftECUilBI 

[0 0 2 3 ] |V0, H E V_E C U 2 0 CI4, Spi^, ^> 



r> 

» + 4 ftffi »*» £ W t: JHE*i:«St a 
^a6tf0^7*-->^v >-r* 0 * g9 2 7 
Jiirt»4o i^SE»B2 7 (4, T/M.ECU2 4C 
t*RS<LTi5*}, H E V_EC U 2 UCW«^L 
HEV_ECU2 0i:ftoTT/M_ECU2 
4y/i«W^dfv\ 7U»*«S*fcft? 0 
[ 0 0 2 4 ] ^-^A3/hn-721li, ^E- 

* At MM" & Sr«iL4 

HEV_ECU2 O^^^fiiflUBCiorja 

*-^AWSBIiieai««l*lT-}o ^-J'An/F 

o-?2 1^Mi, H E V E C U 2 0 C»L, 

AcoHU^ S (Eft. MBilMt^^-K^^L 

[ 0 0 2 5] ^-n^>hD-7 2 2li, B £ 

H E V_E C U 2 U*fc£E««C 4 oTjS«Sn 
it-'fON/OFF (iE(k, iSSIEfeS-tf) h A* 

=&■ tf % it. * B a > h o-v 2 2 ^<b(4 % H E 
V__ECU2 0i:ttU ^-^BOhA**, & 

[ 0 0 2 6 ] E/G_ECU23(i, Jt*MUi>>> 

1 h ^^«»<:1f -5 t^-CA * II E V_E C U 2 0 

***>^ita«(c4orja«sn&iEft^ h ** 

J-r3>ON/OFFlB 1 Tirffi**«0WW 

t&$\ str, ^h;u^7^ - hv<y^r f -^, was, < 

>tlf^x-f^f-i 4 t: 4 £ RS-b U * h ( P , N 
, APS1 \<nfe^\,ZZhT9±fri£to7'- 
**7 9<kn'±fftr'-9* ri/-*XOf ] 2 WO 
N, OFFttfflL ABS^^^7U-^«^CI 

T C mfbz a v h ^5fT-) lUSXDy h ;u BBJE, A / 

[ 0 0 2 7 ] i/:, E/C;_ECU2 3T*ii, HEV_ 
E C U 2 0 \Zti L , x > V > 1 60M9V h ^ 7 IB, jHSfl-rt 

■y f-(Z4£*o y h ^ft^fflf-*** H E V_E C U 

2 0 1Z7 <- K'<y * LTjgffii-& fcft-U, i>S/> J 

[0 0 2 8] T/M_ECU2 4li, HEV_ECU2 

o * «b ^ fxiio m (z 4 *:> r mm ?u4cvT4«aar7 

y^K*^IWSP«*, E/GEICft, 7?-fc;u 
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iE, ru-^X-f yf- 1 2 WON, OFFttffi, 
>«»n--Br, AB S 7-fK/i> 

[ 0 0 2 9 ] J/:, T/M E C U 2 4 ^014, II EV 

ecu 2 0 \z*t l , was, xjjmm h 9 % C V T 4 

<079 -f v 'J 'J EHERXtf-fc J) > ? l ) ~f— U EIG 
n -y ^ 7 y 4 > K\£* *4 ? * \ 4 U»E 

C VT4 -coaatT-y rS-^4/:«!>cOE/Gia 

[0 0 3 0 ] BAT_MU2 5I4, ^»*>i9» -StBSffl^ 
=- -y h-C*»3, ^yf'J 1 0 *tf«i-a±T-0|i-ttllBl 

ffll, ^^f'JlO^Mitl, V7>f{jlj 

z&m.mmizx-DXHE v_ecu 2 ot:iM{t-r^o * 

20 T/<77'J ] 0^-^A3>FD-72 1 ^ 
[0 0 3 1 ] BK K E C U 2 6 14, HE V_E C U 2 

iftlt l , r u - ^ *iME<o?iiijg= & WCA ») , 

HEV ECU 2 0 L, E|4t*»* 

" > ¥jS, filiffi, A B S t-artr-r l^ — ^rfl5»«!R««r 
7 >f - hV<-y ^ LTjS«i-io 
[0 0 3 2 ] &±<D^<('7*) y KMIfll *> X x A {Z jJ 
30 (4, j^lSflHt**^L-C»'»«:Eai-i4^*ZLT45 
E»**vw4iW«l*^R'Br56*l9, jlfiW)^ 

f4 , soib^ co a j . ^ u n fe ft o r «-ss ^ffi » ^ sfefttt a 

[ 0 0 3 3 ] ^Kaft*Sr^L^**E«(4. ±hL 

t, ft e c u to s cL^wmmz x z> ?m&w< tv^f^ 

^ttJS+i II E V E C U 2 0 -Cfc + WKlffJIM-* 2 > 

■CftJbiL^o ftECU«o@a»rr«tefc LTI4, 
^- K-y ^H7i:j;i E C U SftwIfcHrCSn A, -tr >**r 
40 com^ffi-E-w 4 cocoE«t: 4 ^rr*^fiIl»«*lifiO|>IBr, 
iWWf- ^ i: -t >4^ffiJtl* t <OJSfrtteof- j: -j * , 7 ^ 

[ 0 0 3 4 ] Jc — ? A'^J > 2 1 , ^e- 

^B3/hD- 7 2 2waa»rr-c(4, ft^u«x/^«v 

+ yf K-y ^i:J:4*-^A«Biv^7^, 

^ Bwspvxf Aa#^»'»iftmuani, ^e-*A, b 
v ati m oiftfliiB^^cj^e-^A, B^-b>-9-soi% 

f»0 [0 0 3 5 ] tfc, E/G_ECU2 3^§EMr-C 



7 

(i, SrZ.cO'7* 7f K-;/^ -f^tc J:;ji>v >fljljffll> 

t<D&£& y H E V_EC U 2 Urt»<b£itJR^fcA P S 
1 1 <D 7 7 -fc Ji miS. 7- 9 \z^J < x > v > SMIffiUZi £ 31 
x a ? h /uBJ/K > > > PISS: t wEGIUSi: «t 
*j , -fc >-fr#*7 ? f-ai-^S^K^fetf.t^ c > 

[ 0 0 3 6 ] ifc, T/M_ECU2 4 0Sep'rT- 
li, SEco^ * yf- Ky << 7Ci ifgigilfUW v^x 

ttSit&*«iSJtfc, CVT4 0&»JtWW1BfcoB& 

<b , fiagjtMft on eft * tttb + * -t 

[ 0 0 3 7 ] 4fc, B AT__MU 2 5^gef#rrT-ii, 
i £60 * * 7 K ^ ? Y t itZ X Z> /< y t 'J flv X 

i*i«:«>**«£m(;i«ii, ^7fu i o^orniE 

'J 1 0 «D#Mfr*3 > 9 * * .9 wlltt*#ttii-* - tJ&'nT 

[ 0 0 3 8 ] SfcU, BR K ECU 2 60@ uLI&fflrX* 

<±, Clr^co'v 4- yf ^ * * U «t & "7 U - * Miff i> 

-^7^f-Ai-^«QBlfr«:ttffli-a - fcrtWfeT* 
i. 

[ 0 0 3 9 ] HEV_ECU 2 UT'li, SECUT'COi 
JlQ jS «r &■ 1 1 t # , A ^ I i fTr 5E co e C U h (O 5e JOJ M 
C I) K«« l fc WW«* t#ECU^'b7<-M^ 
Uj& f »#-C*-6 t LtflfeOECUH-WmtliL, 

& e c u <Qmi**mmi-z> t 2 7 ii»*»£fc 

[ 0 0 4 0 ] *ECU«rft J f -fr-r^^ffijiD{S^i: LTii, 

T l SOoa/o h^jK^-oT^iCAN (Cont.ro 
Her Area Network) &tfc/ELTv>& c 

[004 i ] fflftmx -)iz % c ano> -y-t-vii, m 
»n#ao f igjwwft->^'f a^k«fuh ev^ecu 2 0 
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3&^-&ECU*:ae»l«IS»*rK*L, x-^ 7 u-a 
Srfflv^TH E V_ECU 2 0 ^^#ECU^»Wffi* 
•^•S- E C H E V_EC U 2 0^«07 i - Y^ v ? 

C UT'OifilWr^HE V_EC U 2 0 CioTH 

[0 0 4 2 ] ia Hi, f-^7l/-i.07*-7^t 
/T< L , iiDABfltt^ ^-K^l.-i, t- « < 7 - fcf h 

f-i y ^HOC RC7>f - ju K, > ^ t 

hx^- ht77U-i,l:W^ yfe-vi:^ y-b- 
20 [0 0 4 3 ] HEV ECU2 0 kBRK ECU 

2 6 fc tm^+zmmow^cogrmmmy < >^±z>m 

«T-tt, 7-ff >x-f 7 7>f 7*«*LT*HfiDl»j|Mt 

[0 0 4 4] r-9V Kii, hCOnJ^i^^ 

< - ;u K ( n = 0 - 8 : n = 0 X' U •=& - h 7 U - A ). T* 
* 4 , H E V_E C U 2 0 > ^ E C U t OBfiO»jaif'- 
^CDBi-iaiflfCMi, n = 1 - 8f)f-^ "7 ^ KC 
ii^T, l/<< hg£vMi2>'<^ httUBJE, > > > EU 
(Eft. xo^ ;u nffi«^«-Mff iRS ^ S TO i l, 
30 t/j, PHM^.tf^HjiU^^^fWON, OFF 

[0 0 4 5] f /j, • ^^^irfiili-^ fctoVT- 9 

& s 1 ^'-f FOf-^ 7 -f KCt&S*i$n, 1 h 

co kf 7 h o - 6 //X7 - r«^7ti7-fff Cff ^) 

IE'»n$*i,vM±afftii*t:(i " o M t«fi e i/j, j-v- 
ffr^-ti, iE7r;ii$^ " 0 0 0 o o o" 'QhZ> 0 

40 [ 0 0 4 6] H E V_EC U 2 0^0 >Xf 

x- ^ fcJi»l*3<b«rv»iS«|gao*^ > 9 SrffAL, - 
cOi^IelSc^^^^ coffin H E V_ECU 2 OJ-WNit 
00 E C U ~ t (l «t , ftfeco E C U -C H E V_ 

ECU2 0 6?3&'?K'&fftUji"& C //-C § Z> X -5 C ^ -o T 

[0 0 4 7 ] WfmJZ&\,*Xl±, HE V_ECU 2 0^ 
h*-? A-=J> hv-y'2 \ & tf*- ^B^>ho-7 
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